Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82eced36-9499-4122-a34e-3e92e4767e29/43513d71-f0cd-3e29-aeec-a5d83aa3656c.roa
File: 43513d71-f0cd-3e29-aeec-a5d83aa3656c.roa (raw, json)
Hash identifier: u/d62Ra0tHFr5T2ivFtpopOx37YMPbd0D8sRYYNRICM=
Subject key identifier: 22:DF:88:2F:3E:8F:20:34:AA:11:E5:44:7B:05:F0:24:BA:FA:FE:8D
Certificate issuer: /CN=82eced36-9499-4122-a34e-3e92e4767e29
Certificate serial: 010D0C9F43285841EEF7FD7CE4E8497453176C30
Authority key identifier: 3F:5A:FE:C1:37:C1:2F:4B:90:32:73:EA:6E:18:69:16:B6:0A:97:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82eced36-9499-4122-a34e-3e92e4767e29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82eced36-9499-4122-a34e-3e92e4767e29/43513d71-f0cd-3e29-aeec-a5d83aa3656c.roa
Signing time: Fri 19 May 2023 13:00:17 +0000
ROA not before: Fri 19 May 2023 13:00:17 +0000
ROA not after: Thu 17 Aug 2023 13:00:17 +0000
asID: 64600
IP address blocks: 209.127.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ee:f7:fd:7c:e4:e8:49:74:53:17:6c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82eced36-9499-4122-a34e-3e92e4767e29
Validity
Not Before: May 19 13:00:17 2023 GMT
Not After : Aug 17 13:00:17 2023 GMT
Subject: CN=1f9b0bf0-9bce-4a32-a204-80ab0433ae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:7d:e2:ec:11:eb:09:6f:27:2a:0f:31:2e:
4a:6a:7f:fb:aa:4d:97:8d:5b:68:5e:13:a8:0d:2f:
e8:85:86:8f:09:62:47:b4:a8:f7:d6:a0:b4:86:e4:
6e:c8:97:7f:90:08:33:44:af:ee:3a:57:44:64:7a:
9c:10:31:ed:b5:d4:18:08:d5:d6:ad:67:cf:17:b1:
c3:8b:52:b4:37:82:22:08:f8:fb:46:b0:3d:9d:15:
59:b3:7b:46:ad:3f:c4:e4:d5:ab:b4:8b:83:af:ce:
e7:62:24:5e:8a:ff:61:11:ec:e4:b9:86:a2:07:41:
65:1a:31:d5:4c:ee:9b:ff:e8:18:43:aa:aa:5c:29:
54:20:b2:08:03:21:f5:05:35:72:ef:bd:91:12:f3:
d3:92:41:43:04:0f:d0:47:29:b6:6f:d5:07:53:cd:
1a:8f:ac:7e:21:b6:a2:5d:66:a2:bc:af:17:ac:00:
c5:42:76:27:e8:82:86:02:9e:bb:9f:67:87:8d:79:
ee:ee:8e:11:97:b7:da:c1:12:fc:8c:93:2d:dc:b5:
58:1e:9d:eb:c5:6d:b8:13:77:ca:47:49:08:eb:d1:
f0:c2:0e:8c:e7:fb:23:21:f4:3c:e6:0d:02:14:27:
8c:d5:51:c3:7b:d7:f4:47:84:c6:ad:cd:08:38:65:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:88:2F:3E:8F:20:34:AA:11:E5:44:7B:05:F0:24:BA:FA:FE:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82eced36-9499-4122-a34e-3e92e4767e29/43513d71-f0cd-3e29-aeec-a5d83aa3656c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82eced36-9499-4122-a34e-3e92e4767e29/82eced36-9499-4122-a34e-3e92e4767e29.crl
X509v3 Authority Key Identifier:
keyid:3F:5A:FE:C1:37:C1:2F:4B:90:32:73:EA:6E:18:69:16:B6:0A:97:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82eced36-9499-4122-a34e-3e92e4767e29.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8c:fa:ea:e5:75:a8:dc:d4:38:b3:b6:fe:cb:a8:26:59:b3:
28:06:58:b8:09:70:67:e8:1f:06:cc:21:da:03:d5:8a:e5:26:
b0:8e:ce:4e:79:40:a8:4e:7e:fc:f2:6f:23:db:bd:b0:9e:a7:
88:94:bd:45:6b:af:7c:a1:02:05:43:78:d4:30:6a:58:07:96:
a4:f3:dd:0d:b8:b7:43:d3:8b:d2:fb:99:83:77:f1:77:1f:eb:
68:3d:00:5a:e7:3c:24:04:71:60:ea:eb:09:fd:76:87:9e:85:
e0:f9:5e:93:df:70:81:fe:a1:a4:12:70:03:1e:dd:11:d3:a9:
7d:86:8e:f8:11:64:73:d4:b2:49:04:e0:c5:02:5c:e1:b0:60:
9f:a2:cd:34:2b:98:ec:c7:98:a7:bf:6f:20:59:fe:d3:31:fe:
7c:22:a7:86:a8:19:5b:e6:c3:e5:e5:c2:ab:94:4d:7e:11:5c:
33:64:2a:c2:1d:cf:3b:e7:81:94:b3:10:ab:90:fd:d6:61:33:
a6:8d:04:e4:68:c6:d0:4b:8e:7b:39:5b:77:15:c2:ee:4c:0e:
23:a6:1d:c8:e7:20:ec:ac:02:f4:60:f8:6a:63:e1:d4:ae:4f:
91:2a:48:c6:1d:3a:ac:9a:a9:9f:28:db:59:3d:db:c1:17:72:
c9:4e:a8:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHu9/185OhJdFMXbDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODJlY2VkMzYtOTQ5OS00MTIyLWEzNGUtM2U5MmU0NzY3
ZTI5MB4XDTIzMDUxOTEzMDAxN1oXDTIzMDgxNzEzMDAxN1owLzEtMCsGA1UEAxMk
MWY5YjBiZjAtOWJjZS00YTMyLWEyMDQtODBhYjA0MzNhZTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtB94uwR6wlvJyoPMS5Kan/7qk2XjVtoXhOo
DS/ohYaPCWJHtKj31qC0huRuyJd/kAgzRK/uOldEZHqcEDHttdQYCNXWrWfPF7HD
i1K0N4IiCPj7RrA9nRVZs3tGrT/E5NWrtIuDr87nYiReiv9hEezkuYaiB0FlGjHV
TO6b/+gYQ6qqXClUILIIAyH1BTVy772REvPTkkFDBA/QRym2b9UHU80aj6x+Ibai
XWaivK8XrADFQnYn6IKGAp67n2eHjXnu7o4Rl7fawRL8jJMt3LVYHp3rxW24E3fK
R0kI69Hwwg6M5/sjIfQ85g0CFCeM1VHDe9f0R4TGrc0IOGXnhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLfiC8+jyA0qhHlRHsF8CS6+v6NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MmVj
ZWQzNi05NDk5LTQxMjItYTM0ZS0zZTkyZTQ3NjdlMjkvNDM1MTNkNzEtZjBjZC0z
ZTI5LWFlZWMtYTVkODNhYTM2NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODJlY2VkMzYtOTQ5OS00MTIyLWEz
NGUtM2U5MmU0NzY3ZTI5LzgyZWNlZDM2LTk0OTktNDEyMi1hMzRlLTNlOTJlNDc2
N2UyOS5jcmwwHwYDVR0jBBgwFoAUP1r+wTfBL0uQMnPqbhhpFrYKl5AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MmVjZWQzNi05NDk5LTQxMjItYTM0ZS0zZTky
ZTQ3NjdlMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuM+urldajc1Diztv7LqCZZsygGWLgJcGfoHwbMIdoD1YrlJrCOzk55
QKhOfvzybyPbvbCep4iUvUVrr3yhAgVDeNQwalgHlqTz3Q24t0PTi9L7mYN38Xcf
62g9AFrnPCQEcWDq6wn9doeeheD5XpPfcIH+oaQScAMe3RHTqX2GjvgRZHPUskkE
4MUCXOGwYJ+izTQrmOzHmKe/byBZ/tMx/nwip4aoGVvmw+XlwquUTX4RXDNkKsId
zzvngZSzEKuQ/dZhM6aNBORoxtBLjns5W3cVwu5MDiOmHcjnIOysAvRg+Gpj4dSu
T5EqSMYdOqyaqZ8o21k928EXcslOqD0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:16 2025 by rpki-client